The BoM essentially acts as a ground truth for our analytic results and can potentially be used to enforce policy gates. Finally, configuration checks are run on kubernetes deployment manifests.